[xcbf] [Fwd: Re: Spoofing Fingerprints.]

[Phil Griffin <phil.griffin@asn-1.com>]

FYI. Check out especially the article at
http://www.counterpane.com/crypto-gram-0205.html#5.



-------- Original Message --------
Subject: Re: Spoofing Fingerprints.
Date: Thu, 16 May 2002 20:05:15 -0400
From: Phil Griffin <phil.griffin@asn-1.com>
Organization: Griffin Consulting - http://ASN-1.com
To: The Biometric Consortium's Discussion List
<BIOMETRICS@PEACH.EASE.LSOFT.COM>
References: <001001c1fcfd$a55f5ba0$2960b241@jake>

I spoke at the ITU-T Security Workshop this week in Seoul
on the X9.84 based OASIS XCBF work. I was impressed by Dr.
Matsumoto, and with his presentation. He didn't strike me
as a hoaxer, but as a serious and thoughtful researcher.

He appears to me to be a scientist. So, prove him wrong if
you can and publish your findings for public scrutiny. I 
believe that this sort of scientific inquiry and debate is
precisely what his work is intended to invite.

His business card says,

  Professor Dr. Tsutomu Matsumoto

  Yokohama National University
  Graduate School of Environment and 
     Information Sciences
  
  tsutomu@mlab.jks.ynu.ac.jp

Phil Griffin



jacobwong wrote:
> 
> I sincerely hope that you are correct in your assessment.  However, call the
> work reported by T. Matsumoto et al.'s  from a reputable university in Japan
> a hoax without any presented evidence would be too hasty and irresponsible a
> conclusion.  Would you care to share with us what attempts you have tried to
> fool "what" readers and concluded that these attempts all failed.  In the
> professional world of ours there is a certain implied ethics that we must
> adhere to.  Namely, until such time that one's reported work is proven to be
> incorrect or a "hoax" by others (Remember the reported room temperature
> fusion experiment success some years ago?), one must assume that the
> reported work has merits and is worth to be considered and looking into.  I
> am somewhat surprised that the Biometric Consortium Discussion List, after
> reviewing the submitted contents, allowed this kind of uncalled for
> arrogance to appear in our extremely useful dialogues to date among all the
> workers in the Biometrics field.
> 
> Incidentally, does anyone know the email address of T. Matsumoto at the
> Yokohama National University of Japan?  I certainly would like to know more
> about his experiments and results as his findings might bear a serious
> consequence to our past, present and future fingerprint biometrics work.
> 
> Respectfully,
> Jacob Y. Wong
> Jaesent Inc., USA
> -----Original Message-----
> From: Phil Krastman <philk@IMCWIRELESS.COM>
> To: BIOMETRICS@PEACH.EASE.LSOFT.COM <BIOMETRICS@PEACH.EASE.LSOFT.COM>
> Date: Thursday, May 16, 2002 9:39 AM
> Subject: Re: Spoofing Fingerprints.
> 
> In my examination of the current devices for fingerprint biometrics I would
> say that this is a hoax report.  I have not examined a whole lot of the
> devices over time but the ones that I have looked at do a pretty good job of
> only detecting fingerprints of live people.  I have tried to fool these
> readers but the attempts have all failed.  It is more likely that attempts
> to fool the readers will generate a lock-out situation similar to what one
> would see with incorrect password guessing.  The gelatin and fingerprint
> copying is something that one sees in spy movies but in real life one
> requires a pretty sophisticated setup to fool these readers.
> 
> Sincerely,
> Phil Krastman
> philk@imcwireless.com
> 
> -----Original Message-----
> From: Gordon Ross [mailto:GordonR@NETNANNY.COM]
> Sent: Thursday, May 16, 2002 10:03 AM
> To: BIOMETRICS@PEACH.EASE.LSOFT.COM
> Subject: Spoofing Fingerprints.
> 
> This is an information article that was sent to me.  Does anyone know
> whether this is a "hoax" or not?  I do know that some of these devices that
> are being written about here can be "spoofed", but this appears to be the
> first time there has been any "so-called" official Publication or research
> documents actually published.
> 
> I do know that most "biometric" devices fall back on some sort of ID and
> Password, in the event the device fails or becomes inoperable.
> 
> We are looking into this.  It certainly makes for an Interesting read.
> 
> http://www.counterpane.com/crypto-gram-0205.html#5
> 
> Gordon.
> 
> -------------------------------------------------------------------
> The preceding was forwarded by the Biometric Consortium's Electronic
> Discussion Group.  Any opinions expressed here do not necessarily
> reflect those of the Biometric Consortium.  Further distribution
> is prohibited.
> 
> Problems and questions regarding this list should be sent to
> BIOMETRICS-request@PEACH.EASE.LSOFT.COM.
> 
> To remove your name from this list please send the command
> "SIGNOFF BIOMETRICS" to <LISTSERV@PEACH.EASE.LSOFT.COM>.  Please
> do not send the "SIGNOFF BIOMETRICS" command to the BIOMETRICS list.
> 
> To update membership information (new e-mail address etc.), please send
> a message to <bailey@biometrics.org> providing the updated information.
> -------------------------------------------------------------------
> 
> -------------------------------------------------------------------
> The preceding was forwarded by the Biometric Consortium's Electronic
> Discussion Group.  Any opinions expressed here do not necessarily
> reflect those of the Biometric Consortium.  Further distribution
> is prohibited.
> 
> Problems and questions regarding this list should be sent to
> BIOMETRICS-request@PEACH.EASE.LSOFT.COM.
> 
> To remove your name from this list please send the command
> "SIGNOFF BIOMETRICS" to <LISTSERV@PEACH.EASE.LSOFT.COM>.  Please
> do not send the "SIGNOFF BIOMETRICS" command to the BIOMETRICS list.
> 
> To update membership information (new e-mail address etc.), please send
> a message to <bailey@biometrics.org> providing the updated information.
> -------------------------------------------------------------------
> 
> -------------------------------------------------------------------
> The preceding was forwarded by the Biometric Consortium's Electronic
> Discussion Group.  Any opinions expressed here do not necessarily
> reflect those of the Biometric Consortium.  Further distribution
> is prohibited.
> 
> Problems and questions regarding this list should be sent to
> BIOMETRICS-request@PEACH.EASE.LSOFT.COM.
> 
> To remove your name from this list please send the command
> "SIGNOFF BIOMETRICS" to <LISTSERV@PEACH.EASE.LSOFT.COM>.  Please
> do not send the "SIGNOFF BIOMETRICS" command to the BIOMETRICS list.
> 
> To update membership information (new e-mail address etc.), please send
> a message to <bailey@biometrics.org> providing the updated information.
> -------------------------------------------------------------------